Privacy
Policy

This Privacy Policy explains how OhBe (trading name of Obi Spencer, sole trader) collects, uses, stores, and protects personal data. OhBe is committed to handling your data responsibly and in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Please read this policy carefully. By using the OhBe website, submitting an enquiry, or signing up to our mailing list, you acknowledge that you have read and understood this policy.

---

1. Who We Are

OhBe is a London-based creative business operated as a sole trader by Obi Spencer.

Data Controller: Obi Spencer, trading as OhBe
Email: hello@ohbe.co.uk
Location: London, United Kingdom

As a sole trader, Obi Spencer is the data controller responsible for your personal data.

---

2. What Data We Collect

2.1 Enquiry Form Data

When you submit a project enquiry through the OhBe website, we collect the following personal information:

• Full name
• Company name
• Professional email address
• Project brief and creative description
• Budget range (selected from a slider, no exact figures stored)
• Location (city or general area)
• Time requirements for the project
• Service type selected

We do not collect phone numbers through the enquiry form unless you include one in your message.

2.2 Usage & Analytics Data

When you visit the OhBe website, the following data may be automatically collected via third-party analytics and tracking tools (see Section 6):

• Pages visited and time spent on each page
• Referring website or search term
• Browser type and version
• Device type (desktop, mobile, tablet)
• Approximate geographic location (country/city level, not precise address)
• IP address (anonymised where possible)
• Interactions with page elements (clicks, scrolls)

2.3 Client portal data

If you are given access to the OhBe client portal, we process:

• Login email address and access credentials issued to you
• Your name and organisation as shown in the portal
• Files, invoices, and messages you view or receive through the portal
• Messages you send via the portal contact form (also forwarded through Formspree)

Portal access is for active or former clients and partners. We do not make portal accounts publicly available.

2.4 Mailing List & Marketing Emails

If you choose to join the OhBe mailing list via the website popup or any other signup form we offer, we collect:

• Your email address
• The date and time of your signup
• Confirmation that you gave explicit consent to receive marketing emails (recorded at signup)

We do not add anyone to the mailing list without this opt-in. Signing up to the mailing list is separate from submitting a project enquiry, you are not subscribed to marketing emails simply by contacting OhBe about a project unless you separately opt in.

2.5 Cookie Data

OhBe's website uses cookies. See Section 7 for full details.

---

3. How We Use Your Data

OhBe uses your personal data for the following purposes:

Purpose	Legal Basis
Responding to your project enquiry	Legitimate interest / Pre-contractual steps
Providing a personalised quote	Pre-contractual steps
Communicating about your project	Performance of a contract
Operating the client portal (files, invoices, messages)	Performance of a contract / Legitimate interest
Improving the website experience	Legitimate interest
Advertising and retargeting (with consent)	Consent (via cookie banner)
Analytics and site performance monitoring	Consent (via cookie banner)
Sending marketing emails (mailing list)	Consent (explicit opt-in at signup)

We will never use your data for purposes incompatible with those listed above. We will not send you marketing emails unless you have opted in, and you may withdraw that consent at any time (see Section 8).

---

4. How Long We Keep Your Data

Data Type	Retention Period
Enquiry form submissions (not converted to client)	12 months from date of submission (website copy); Formspree inbox per their retention
Enquiry copies stored in OhBe admin systems	12 months unless the enquiry becomes an active project
Client project data (converted enquiries)	6 years from project completion (in line with sole trader tax record requirements)
Client portal files and invoices	For the duration of the client relationship, then up to 6 years where required for tax or legal records
Portal login records	While the account remains active, then deleted within 90 days of closure unless retention is required by law
Analytics data	As set by the third-party provider (see Section 6)
Cookie data	As set by each cookie type (see Section 7)
Mailing list subscribers	Until you unsubscribe or ask us to delete your details, then removed within 30 days

After the relevant retention period, your data will be securely deleted.

---

5. Who We Share Your Data With

OhBe does not sell, rent, or trade your personal data to any third party.

Your data may be shared with the following categories of third parties only where necessary to operate the service:

• Form submission services - to receive enquiry and mailing list signups securely (Formspree, see Section 6)
• Website and API hosting - Vercel, Inc. (serves the site and secure form/portal APIs)
• File storage - Cloudflare R2 (client portal deliverables, invoices, and related metadata)
• Booking scheduling - Calendly (when you book via the client portal calendar widget)
• Email service providers - to receive and manage enquiry, client, and mailing list emails (e.g. Google Workspace / Gmail)
• Analytics providers - Google Analytics, Google Tag Manager (see Section 6)
• Advertising platforms - Meta (Facebook/Instagram) via Meta Pixel (see Section 6), used only where consent has been given
• Legal or regulatory authorities - only where required by law

All third-party providers are required to handle your data securely and in accordance with applicable data protection laws.

---

6. Third-Party Tools & Services

The OhBe website uses the following third-party tools:

The Meta Pixel and Google Analytics will only activate after you have given your explicit consent via the cookie consent banner on the OhBe website.

---

7. Cookies

Cookies are small text files stored on your device when you visit a website. OhBe uses cookies to improve your experience and to understand how visitors use the site.

Cookie Categories

Category	Description	Examples	Consent Required
Strictly Necessary	Essential for the website to function. Cannot be disabled.	Session cookies, security cookies	No
Analytics	Help us understand how visitors interact with the site. Anonymised where possible.	Google Analytics cookies (_ga, _gid)	Yes
Marketing / Advertising	Used to show relevant adverts and measure ad performance.	Meta Pixel cookies (_fbp, _fbc)	Yes

Managing Cookies

When you first visit the OhBe website, a cookie consent banner will appear. You can choose to accept all cookies, reject non-essential cookies, or customise your preferences.

You can also manage or delete cookies at any time through your browser settings:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Safari: Preferences → Privacy → Manage Website Data
• Firefox: Options → Privacy & Security → Cookies and Site Data
• Edge: Settings → Cookies and site permissions

Please note that disabling certain cookies may affect the functionality of the website.

---

8. Your Rights Under UK GDPR

As a UK resident, you have the following rights regarding your personal data:

Right	What It Means
Right of access	You can request a copy of the personal data OhBe holds about you
Right to rectification	You can ask us to correct inaccurate or incomplete data
Right to erasure	You can ask us to delete your personal data ("the right to be forgotten")
Right to restrict processing	You can ask us to limit how we use your data
Right to data portability	You can request your data in a structured, machine-readable format
Right to object	You can object to processing based on legitimate interest
Right to withdraw consent	Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, contact OhBe at hello@ohbe.co.uk. We will respond within 30 days of receiving your request.

8.1 Marketing Emails & Unsubscribe

If you are on the OhBe mailing list, you may withdraw consent and stop receiving marketing emails at any time by:

• Using the unsubscribe link in any marketing email we send you, or
• Emailing hello@ohbe.co.uk with the address you used to sign up and asking to be removed

We will process unsubscribe requests promptly and will not send further marketing emails after your request has been actioned. Withdrawing consent for marketing does not affect emails we must send about an active project or booking (e.g. quotes, deliverables, invoices).

---

9. Data Security

OhBe takes reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. These include:

• HTTPS encryption for all website and portal traffic
• Client portal access protected by individual login credentials
• Form submissions handled via encrypted HTTPS; enquiry and mailing list data may be stored in access-controlled Cloudflare R2 storage and your Formspree inbox
• Administrative access limited to OhBe personnel who need it to deliver your project
• Regular review of data access and storage practices

While we take data security seriously, no method of electronic transmission or storage is 100% secure. In the event of a data breach that is likely to affect your rights, we will notify you and the Information Commissioner's Office (ICO) as required by UK GDPR.

---

10. International Data Transfers

Some of the third-party providers listed in Section 6 (including Google and Meta) may transfer and process your data outside the United Kingdom. Where this occurs, OhBe ensures that appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms recognised under UK GDPR.

---

11. Children's Privacy

OhBe's website and services are not directed at children under the age of 16. OhBe does not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact hello@ohbe.co.uk and we will delete it promptly.

---

12. Links to Other Websites

The OhBe website may contain links to third-party websites (such as Instagram or LinkedIn). OhBe is not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies when you visit them.

---

13. Complaints

If you believe OhBe has not handled your personal data in accordance with this policy or UK GDPR, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Website: ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

We would, however, always appreciate the opportunity to address your concerns directly first. Please contact us at hello@ohbe.co.uk before escalating to the ICO.

---

14. Changes to This Policy

OhBe may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The "last updated" date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.

---

15. Contact

For any questions, requests, or concerns about this Privacy Policy or how OhBe handles your data:

Email: hello@ohbe.co.uk
Trading name: OhBe
Operator: Obi Spencer (Sole Trader)
Location: London, United Kingdom